> Markdown version of [/jobs/ext/1632465-cyber-threat-lead](https://www.wearedevelopers.com/jobs/ext/1632465-cyber-threat-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Threat Lead - **Company:** British Airways - **Location:** Harmondsworth, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** NetFlow, Open Source Technology, Mitre Att&ck, Cyber Threat Analysis, Cybercrime - **Published:** July 22, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2887498725-2 ## About the Role * Highly analytical, demonstrating a methodical and structured approach with high attention to detail * Good communicator, taking complex technical issues and making them approachable to all stakeholders * Experience in threat modelling using frameworks such as STRIDE, PASTA, attack trees (Desirable) * Ability to remain calm and prioritise under pressure * Understanding of incident response methodology * Strong understanding of actor methodology including their tactics, techniques and procedures Your experience: * Holding or working towards relevant cyber intelligence certifications e.g., SANS/GIAC (FOR578, FOR589), CREST CPTIA/CRTIA * Demonstrable experience in threat intelligence gathering, analysis and reporting * Experienced in the use of MITRE ATT&CK, Lockheed Martin Killchain, Diamond model etc * Understanding of aviation, transport, or critical infrastructure threat landscape (Desirable) * Experience in tracking adversary infrastructure through open source or Netflow data (Desirable) ## Description The role: Cyber Threat Lead This role reports to the Cyber Threat Intelligence Manager, working with IAG and BA business to ensure BA is identifying, understanding and responding to cyber threats and emerging vulnerabilities. What you'll do: * Leading the effort to identify and report cyber threats relevant to British Airways, covering both tactical and strategic requirements * Technical leader for cyber threat identification across BA * Support the Cyber Threat Intelligence Manager in active threat management for BA, ensuring timely, specific, and relevant cyber threat information is available to enable decision making * Engage with IAG group peers, the wider aviation industry and UK critical infrastructure and government bodies such as NCSC * Manage and deliver on threat intelligence requirements and end to end intelligence lifecycle * Engage collaboratively and pragmatically with BA/IAG stakeholders to undertake cyber threat assessments, supporting cyber control decision making * Leverage available and opensource feeds and tools, to track the cyber threats that BA faces and produce finished intelligence products for stakeholders across the organisation * Support the Cyber Threat Intelligence and Cyber Incident Managers during cyber incident response activities * Support the implementation of the broader BA/IAG Cyber Strategy ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)